{ names, ... }: {
  networking = {
    hostName = names.hostname;
    networkmanager.enable = true;
    firewall = {
      enable = true;
      allowedTCPPortRanges = [
        { from = 3000; to = 3999; }
        { from = 8000; to = 8999; }
      ];
    };
  };
  services.openssh = {
    enable = true;
    settings = {
      PasswordAuthentication = false;
      PermitRootLogin = "no";
    };
  };
  users.users.${names.users.admin}.extraGroups = [ "networkmanager" ];
}
